/**
 * Copyright (c) 2015-2016, Michael Yang 杨福海 (fuhai999@gmail.com).
 *
 * Licensed under the GNU Lesser General Public License (LGPL) ,Version 3.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.gnu.org/licenses/lgpl-3.0.txt
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package com.wzgl.core.interceptor;


import javax.servlet.http.HttpServletRequest;

import com.alibaba.fastjson.JSONObject;
import com.jfinal.aop.Interceptor;
import com.jfinal.aop.Invocation;
import com.jfinal.core.Controller;
import com.wzgl.core.model.Tusers;
import com.wzgl.core.utils.EncryptUtils;
import com.wzgl.core.utils.MessageEnum;

public class UCodeInterceptor implements Interceptor {

	@Override
	public void intercept(Invocation inv) {
		if (isMultipartRequest(inv)) {
			inv.getController().getFile();
		}
		String ucode = inv.getController().getPara("ucode");
		if (ucode == null || "".equals(ucode.trim())) {
			renderError(inv);
			return;
		}

		Tusers user = InterUtils.tryToGetUser(inv);
		if (user == null) {
			renderError(inv);
			return;
		}

		if (!ucode.equals(EncryptUtils.generateUcode(user.getFid()))) {
			renderError(inv);
			return;
		}

		inv.invoke();
	}

	private boolean isMultipartRequest(Invocation inv) {
		String contentType = inv.getController().getRequest().getContentType();
		return contentType != null && contentType.toLowerCase().indexOf("multipart") != -1;
	}

	private void renderError(Invocation inv) {
		 JSONObject json = new JSONObject();
		 Controller controller = inv.getController();
		 HttpServletRequest request = controller.getRequest();
		 String header = request.getHeader("X-Requested-With");  
         boolean isAjax = "XMLHttpRequest".equalsIgnoreCase(header);  
         if(isAjax){
   			 json.clear();
     			 json.put("error", MessageEnum.NO_LOGIN.getRetCode());
     			 json.put("message", MessageEnum.NO_LOGIN.getRetMess());
     			 controller.renderJson(json.toJSONString());
   		 }else{
   			 controller.render("index.jsp");
   		 }
	}

}
